last executing test programs: 8.946207718s ago: executing program 0 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x30b}, 0x14}, 0x1, 0x1000000}, 0x0) 8.077983098s ago: executing program 0 (id=1438): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setresuid(0x0, 0x0, 0x0) 8.008467443s ago: executing program 0 (id=1440): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000d23590227a92dcb59722db383ff7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0xfffffffe, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff0b358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x765c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x3, 0x0, 0x200, 0xfffffffd}, &(0x7f00000003c0)=0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 7.954542929s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f00000002c0)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0x0, 0x5e, &(0x7f0000000280), &(0x7f0000000800)="ffe2000009000000393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4f737c7f91ceaa6790f080b0d2375918c17be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb000000", 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x24000, 0xa2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000090007000000000000008f1a4000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) uname(&(0x7f0000000780)=""/249) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r3, r4, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x10) 7.788957634s ago: executing program 0 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x4f01, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x6, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001a) fcntl$notify(r3, 0x402, 0x19) 7.727538379s ago: executing program 0 (id=1445): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@journal_checksum}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@dioread_lock}, {@norecovery}, {@resgid}, {@lazytime}, {@noload}, {@lazytime}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) chdir(&(0x7f00000000c0)='./bus\x00') renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e9c310000000000010902240001000000000100000000000000000921000000010000000005000000deffffff"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e0000000000010902240001"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000500000000040000000000000000000002aec72f63b618451b246f3d91343e0f82b5c6d87f5f6c097175997a1ddcf5bf4c9fd83555f10e3be351a62cf937e598f3c724bc19d2dd6b88ec5331aae5cbd550ee6e671cb1efb47a50014f565689d5d6095bf2a7ed137954d492a5769ac03697bd3847117a5ce0c8caa81ac8d0d64c76a6a7d9c6afde27178fc25cb8cb2dfea415813d5bf66a5c6d53e3bf1785689ccc6893d657afc6db09c8eb0cbb6710994b44a55972d8a3c4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@file={0x1}, 0x6e) ptrace(0x10, 0x1) 3.985622753s ago: executing program 2 (id=1490): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0xfffffffe, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff0b358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x765c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 3.985093953s ago: executing program 2 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0xc00000, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x120781) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x8000000, 0xb, 0x0, 0x0, 0x0, 0x11, "4874ef095b775b5e51210c4037a557f800ff97aa6b42683995845c8c3ce42e76d4db19d512f6f28300", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549", [0x0, 0x1]}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x1, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r8 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe897, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x1000, 0xf8, &(0x7f0000000400)=""/248, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x17, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x8, 0x4}, 0x10, r6, 0xffffffffffffffff, 0x8, &(0x7f0000000600)=[r7, r8], &(0x7f0000000640)=[{0x2, 0x5, 0xb}, {0x1, 0x3, 0xc, 0x1}, {0x2, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x5, 0x6}, {0x1, 0x2, 0x1, 0x3}, {0x0, 0x2, 0xf}, {0x1, 0x1, 0x7, 0x1}, {0x4, 0x1, 0x10}], 0x10, 0x6, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) futex(0xfffffffffffffffc, 0x80, 0x3, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) 3.658514943s ago: executing program 2 (id=1497): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00ddce271454ebd47e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000069, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x6, 0x2, 0x18, @empty, @private2, 0x40, 0x700, 0xfffffff8, 0xcf}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="480100001000000800000000fddbdf2500000000", @ANYRES32, @ANYBLOB], 0x148}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYRES64, @ANYBLOB="094060a2bd76ee18a1e0a3411e44517ce837563c376a3f60af93bd2d8004b9d6035b82e739eba6510b3595536602def1780e32a90d342f00aa40b22d9b3341b07f49f1d42ae293eaf0809f31d471c22ac136e6616a53c45620b87485196c13c5c6b6a9a55491e79a8d92472f01ca0602bc5ef17df5d2b857a3e2ad8736ab524e", @ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES8=r1, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a51220c41b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41bcde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f392a38052f859ab5600000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x80000001}}, 0x6, 0x6, 0x3, 0xb6, 0x7}, &(0x7f0000000680)=0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200000003000000"], 0x50) 3.652914774s ago: executing program 2 (id=1498): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) 3.632938185s ago: executing program 2 (id=1499): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) 2.796330223s ago: executing program 4 (id=1501): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/154, 0x9a}, 0x4008}], 0x2, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB="000000f900000000000100004462ce96c785f662", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x1000000) 1.941132921s ago: executing program 4 (id=1514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = fsopen(&(0x7f0000000400)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x1000000) 618.210483ms ago: executing program 2 (id=1527): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/154, 0x9a}, 0x4008}], 0x2, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB="000000f900000000000100004462ce96c785f662", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x1000000) 304.484182ms ago: executing program 1 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 273.926584ms ago: executing program 1 (id=1535): socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3ba) syz_clone(0x2100000, 0x0, 0x2d, 0x0, 0x0, 0x0) utime(&(0x7f0000003dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 232.127928ms ago: executing program 1 (id=1537): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) msync(&(0x7f0000952000/0x1000)=nil, 0x1000, 0x6) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0xfe, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10340, 0x200, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 226.485599ms ago: executing program 3 (id=1538): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xd3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34b3fbc8b3d0b1c668797b7c33fe4b0000", @ANYRES16, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f00000000000a0001007770616e31000000"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 200.983361ms ago: executing program 1 (id=1539): socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0xc, 0x0) 169.712034ms ago: executing program 1 (id=1540): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) msync(&(0x7f0000952000/0x1000)=nil, 0x1000, 0x6) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0xfe, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10340, 0x200, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 139.681757ms ago: executing program 1 (id=1541): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00ddce271454ebd47e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000069, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x6, 0x2, 0x18, @empty, @private2, 0x40, 0x700, 0xfffffff8, 0xcf}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="480100001000000800000000fddbdf2500000000", @ANYRES32, @ANYBLOB], 0x148}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYRES64, @ANYBLOB="094060a2bd76ee18a1e0a3411e44517ce837563c376a3f60af93bd2d8004b9d6035b82e739eba6510b3595536602def1780e32a90d342f00aa40b22d9b3341b07f49f1d42ae293eaf0809f31d471c22ac136e6616a53c45620b87485196c13c5c6b6a9a55491e79a8d92472f01ca0602bc5ef17df5d2b857a3e2ad8736ab524e", @ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES8=r1, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x80000001}}, 0x6, 0x6, 0x3, 0xb6, 0x7}, &(0x7f0000000680)=0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200000003000000"], 0x50) 137.305617ms ago: executing program 4 (id=1542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x5, 0x4f5, &(0x7f0000000740)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="8500000061000000350000000000000085000000230000009500000000000000f4670880271e3542dfa8ba6287066c5197fabc5f7010e81a15202164afe0b737126ea6f7dc39cd340101000000000000e22ff5dde54704d25c79949c23e20100000000000000c09cc28de194f40800000000b0d3712c7e93366796c7224a0c2c0213af2ecdf3c075e3d800000104f4b1fc30dc914bc16543d4baa2bb755af3d576090c4867a7b6393e366c6386d5ec7209d031f40f3012e95752003b2f7846c744ae6af3c037102124d8eb000000000000000000000000a46aac3abe6c4d7f47ef6d02bad9dddacecf7eaa4a9779f8555ed6aea768c1f28221c110ed050000000ee282ab76ef93d96bc46a7c04b8c5324812d992a4f8dc6fcba00b1b2da951667d0276a0327b56c0ebfb19b3426887b6f1b6070e0ce1f844ce32a9988ca042dca52fbb8c1452b651ebf942f7297f7b66254c567b7983f60f2744419a2f238f173d0000003cf4fbd775d9c07d8d591a4dac60ff00a629b3b200000000000000000000000009001d004e41ff9b4d00e07ff771cea08bea1fb4c4c43f74936f333e3ae44f7ddd2fb35d4c46392ae855531b1eaf40aee8c94fd812e40f14c519a264ff3c572eecd5f6ca98b55e78f8d94f57ed7e6a3ab5dd9a4adedbdf0e58f58eb2e83500000000000000934c92002eace9a8d6f3dd008acf8a5c0fb433678060ac0e201e401fb1711d41f45d90a1e19795c995ff7d0020ecccf41d81c8c510cf773171407191872d0e3e62dd578d590e62ff74d667477ac69a806d4552084a87f74fdfc117d4975576c102976c1ef70ceac9ff714bab1f59f8ebd67f2aca41706c147e3e0d3e557de0349c5ca80f10361bedc4832ae62a2b745ef6587710a82c2e27bacc81877b996a708c3a9235bdbec2cde0cfca78205439b4fd312c7106000000000000000000000000df83e1a6c37e26d8f98d7e9419275bc3bba633b47d00"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000002c0)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0x0, 0x5e, &(0x7f0000000280), &(0x7f0000000800)="ffe2000009000000393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4f737c7f91ceaa6790f080b0d2375918c17be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb000000", 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x24000, 0xa2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000090007000000000000008f1a4000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) uname(&(0x7f0000000780)=""/249) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r2, r3, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x10) 130.557377ms ago: executing program 3 (id=1543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYRES32, @ANYBLOB="000108"], 0x150}}, 0x0) 63.518844ms ago: executing program 3 (id=1544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$notify(r1, 0x402, 0x19) 0s ago: executing program 3 (id=1547): socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3bd) syz_clone(0x2100000, 0x0, 0x2d, 0x0, 0x0, 0x0) utime(&(0x7f0000003dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) kernel console output (not intermixed with test programs): ses unique to avoid problems! [ 132.331300][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.341925][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.352028][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.362576][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.372471][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.382948][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.392791][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.403558][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.416131][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.442228][ T7468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.451088][ T7468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.460058][ T7468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.468942][ T7468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.485261][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.632363][ T7725] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 132.757128][ T7499] veth0_vlan: entered promiscuous mode [ 132.775762][ T7499] veth1_vlan: entered promiscuous mode [ 132.804049][ T7499] veth0_macvtap: entered promiscuous mode [ 132.831571][ T7499] veth1_macvtap: entered promiscuous mode [ 132.854804][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.865463][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.875341][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.885852][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.896590][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.907286][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.917298][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.927978][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.937905][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.948395][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.958290][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.968911][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.984262][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.992945][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.003444][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.013366][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.023887][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.033804][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.044414][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.054305][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.064781][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.074712][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.085327][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.095285][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.105868][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.118133][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.136544][ T7499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.145690][ T7499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.155384][ T7499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.164507][ T7499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.308668][ T7643] coredump: 37(syz.0.966): written to core: VMAs: 29, size 89026560; core: 60002990 bytes, pos 89034752 [ 133.475075][ T7775] loop4: detected capacity change from 0 to 512 [ 133.494841][ T7775] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 133.520129][ T7775] loop4: detected capacity change from 0 to 512 [ 133.539355][ T7775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.581307][ T7775] EXT4-fs (loop4): 1 truncate cleaned up [ 133.602298][ T7775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.665138][ T7734] coredump: 5(syz.4.930): written to core: VMAs: 30, size 89083904; core: 59994854 bytes, pos 89092096 [ 133.754447][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.817399][ T7786] netlink: 145 bytes leftover after parsing attributes in process `syz.0.987'. [ 133.834062][ T7788] loop4: detected capacity change from 0 to 512 [ 133.840572][ T7786] netlink: 145 bytes leftover after parsing attributes in process `syz.0.987'. [ 133.852148][ T7788] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 133.894450][ T7788] loop4: detected capacity change from 0 to 512 [ 133.917925][ T7788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.936008][ T7788] EXT4-fs (loop4): 1 truncate cleaned up [ 133.942310][ T7788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.999612][ T7792] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 134.050596][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.057481][ T7711] coredump: 56(syz.0.975): written to core: VMAs: 31, size 89157632; core: 60011294 bytes, pos 89165824 [ 134.146143][ T7801] loop4: detected capacity change from 0 to 512 [ 134.161108][ T7801] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 134.185067][ T7801] loop4: detected capacity change from 0 to 512 [ 134.195183][ T7801] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.231431][ T7801] EXT4-fs (loop4): 1 truncate cleaned up [ 134.237831][ T7801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.347875][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.419364][ T7810] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 134.750012][ T7797] coredump: 84(syz.0.989): written to core: VMAs: 31, size 89157632; core: 60011294 bytes, pos 89165824 [ 134.924873][ T7813] coredump: 19(syz.4.994): written to core: VMAs: 29, size 91123712; core: 62096046 bytes, pos 91131904 [ 134.949837][ T7816] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 135.116519][ T7830] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1000'. [ 135.178485][ T7834] loop3: detected capacity change from 0 to 512 [ 135.190956][ T7834] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 135.208273][ T7834] loop3: detected capacity change from 0 to 512 [ 135.215851][ T7834] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.230941][ T7834] EXT4-fs (loop3): 1 truncate cleaned up [ 135.236952][ T7834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.371090][ T7499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.565365][ T7819] coredump: 87(syz.0.995): written to core: VMAs: 29, size 91123712; core: 62100142 bytes, pos 91131904 [ 135.574003][ T7854] loop3: detected capacity change from 0 to 512 [ 135.595290][ T7854] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 135.668216][ T7859] loop4: detected capacity change from 0 to 164 [ 135.676283][ T7859] Unable to read rock-ridge attributes [ 135.682004][ T7861] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1012'. [ 135.696814][ T7859] netlink: 145 bytes leftover after parsing attributes in process `syz.4.1013'. [ 135.707633][ T7859] netlink: 145 bytes leftover after parsing attributes in process `syz.4.1013'. [ 135.747629][ T7863] loop4: detected capacity change from 0 to 512 [ 135.777339][ T7863] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 135.803280][ T7863] loop4: detected capacity change from 0 to 512 [ 135.825705][ T7863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.837702][ T7863] EXT4-fs (loop4): 1 truncate cleaned up [ 135.846146][ T7863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.925896][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.069664][ T7878] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 136.096543][ T7882] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 136.167588][ T7891] loop4: detected capacity change from 0 to 512 [ 136.177804][ T7891] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 136.203465][ T7891] loop4: detected capacity change from 0 to 512 [ 136.215168][ T7891] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.230803][ T7891] EXT4-fs (loop4): 1 truncate cleaned up [ 136.237087][ T7891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.340355][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.515911][ T7899] loop4: detected capacity change from 0 to 512 [ 136.535744][ T7899] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 136.583379][ T7899] loop4: detected capacity change from 0 to 512 [ 136.599593][ T7899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.642426][ T7899] EXT4-fs (loop4): 1 truncate cleaned up [ 136.648607][ T7899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.669772][ T7901] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 136.693419][ T7884] coredump: 104(syz.0.1018): written to core: VMAs: 29, size 89026560; core: 60002990 bytes, pos 89034752 [ 136.715820][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 136.715838][ T29] audit: type=1326 audit(1727386377.998:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.1027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f909912df39 code=0x0 [ 136.892730][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.942940][ T29] audit: type=1326 audit(1727386378.228:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 136.966540][ T29] audit: type=1326 audit(1727386378.228:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.047796][ T7886] coredump: 45(syz.4.1021): written to core: VMAs: 29, size 89026560; core: 59998894 bytes, pos 89034752 [ 137.053353][ T29] audit: type=1326 audit(1727386378.268:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.082716][ T29] audit: type=1326 audit(1727386378.268:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.106214][ T29] audit: type=1326 audit(1727386378.278:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.129747][ T29] audit: type=1326 audit(1727386378.278:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.153644][ T29] audit: type=1326 audit(1727386378.288:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.177240][ T29] audit: type=1326 audit(1727386378.288:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.201035][ T29] audit: type=1326 audit(1727386378.288:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 137.233175][ T7913] loop4: detected capacity change from 0 to 512 [ 137.241826][ T7913] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 137.258092][ T7913] loop4: detected capacity change from 0 to 512 [ 137.270783][ T7913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.315620][ T7913] EXT4-fs (loop4): 1 truncate cleaned up [ 137.333314][ T7913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.451873][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.661275][ T7905] coredump: 30(syz.3.1027): written to core: VMAs: 29, size 91123712; core: 62100142 bytes, pos 91131904 [ 137.688879][ T7920] chnl_net:caif_netlink_parms(): no params data found [ 137.766626][ T7949] loop3: detected capacity change from 0 to 512 [ 137.774718][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.781916][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.793102][ T7949] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 137.808244][ T7920] bridge_slave_0: entered allmulticast mode [ 137.827612][ T7920] bridge_slave_0: entered promiscuous mode [ 137.839160][ T7949] loop3: detected capacity change from 0 to 512 [ 137.847167][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.854398][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.867622][ T7949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.879280][ T7920] bridge_slave_1: entered allmulticast mode [ 137.886226][ T7920] bridge_slave_1: entered promiscuous mode [ 137.906942][ T7920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.910709][ T7949] EXT4-fs (loop3): 1 truncate cleaned up [ 137.919118][ T7920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.924560][ T7949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.957480][ T7920] team0: Port device team_slave_0 added [ 137.964227][ T7920] team0: Port device team_slave_1 added [ 137.983858][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.990895][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.017281][ T7920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.032280][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.039350][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.065552][ T7920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.077549][ T7499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.103941][ T7920] hsr_slave_0: entered promiscuous mode [ 138.117990][ T7920] hsr_slave_1: entered promiscuous mode [ 138.125896][ T7920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.128753][ T7953] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 138.133665][ T7920] Cannot create hsr debugfs directory [ 138.228857][ T7920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.229823][ T7963] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 138.286314][ T7920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.335223][ T7920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.394577][ T7920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.493484][ T7920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.512789][ T7920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.530617][ T7920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.547534][ T7920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.588795][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.595994][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.603438][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.610808][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.695575][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.719864][ T1706] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.740340][ T1706] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.794665][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.819666][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.827052][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.855848][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.863081][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.014602][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.094985][ T7958] coredump: 44(syz.3.1040): written to core: VMAs: 29, size 89026560; core: 60002990 bytes, pos 89034752 [ 139.212237][ T7920] veth0_vlan: entered promiscuous mode [ 139.231623][ T7920] veth1_vlan: entered promiscuous mode [ 139.273947][ T7920] veth0_macvtap: entered promiscuous mode [ 139.293712][ T7920] veth1_macvtap: entered promiscuous mode [ 139.314459][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.325089][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.335019][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.345514][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.355871][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.366606][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.376595][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.387252][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.397175][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.407686][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.417681][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.428457][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.438443][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.449085][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.461830][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.497685][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.508253][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.518109][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.528586][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.532061][ T8020] loop4: detected capacity change from 0 to 512 [ 139.538512][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.555315][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.565374][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.575932][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.586391][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.586615][ T8020] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 139.596834][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.616353][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.627079][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.636971][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.647518][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.663984][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.673193][ T7920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.682051][ T7920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.690868][ T7920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.699594][ T7920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.716269][ T8020] loop4: detected capacity change from 0 to 512 [ 139.720996][ T8014] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 139.737955][ T8020] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.777543][ T7966] coredump: 115(syz.0.1043): written to core: VMAs: 29, size 89026560; core: 60002990 bytes, pos 89034752 [ 139.789172][ T8020] EXT4-fs (loop4): 1 truncate cleaned up [ 139.801402][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.019100][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.057589][ T8040] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 140.606552][ T8022] coredump: 59(syz.3.1058): written to core: VMAs: 31, size 89157632; core: 60011294 bytes, pos 89165824 [ 140.860493][ T8043] coredump: 7(syz.2.1064): written to core: VMAs: 30, size 89083904; core: 60003046 bytes, pos 89092096 [ 140.978523][ T8063] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 141.104275][ T8072] loop4: detected capacity change from 0 to 512 [ 141.123668][ T8072] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 141.164467][ T8072] loop4: detected capacity change from 0 to 512 [ 141.184429][ T8072] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.215255][ T8072] EXT4-fs (loop4): 1 truncate cleaned up [ 141.241351][ T8072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.255162][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.267564][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.282455][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.341256][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.374166][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.400217][ T8085] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 141.417102][ T8093] loop4: detected capacity change from 0 to 512 [ 141.441534][ T8093] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 141.468098][ T8093] loop4: detected capacity change from 0 to 512 [ 141.487029][ T8093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.525380][ T8093] EXT4-fs (loop4): 1 truncate cleaned up [ 141.536945][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.538613][ T8093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.616300][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.709072][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.741487][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.839701][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.862530][ T8066] coredump: 14(syz.2.1073): written to core: VMAs: 29, size 91123712; core: 62096046 bytes, pos 91131904 [ 141.890809][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 141.890837][ T29] audit: type=1326 audit(1727386383.158:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 141.920937][ T29] audit: type=1326 audit(1727386383.158:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 141.945048][ T29] audit: type=1326 audit(1727386383.158:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 141.968504][ T29] audit: type=1326 audit(1727386383.158:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 141.992424][ T29] audit: type=1326 audit(1727386383.158:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 142.016253][ T29] audit: type=1326 audit(1727386383.158:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 142.039943][ T29] audit: type=1326 audit(1727386383.158:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 142.063853][ T29] audit: type=1326 audit(1727386383.158:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 142.087666][ T29] audit: type=1326 audit(1727386383.158:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 142.112201][ T29] audit: type=1326 audit(1727386383.158:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 142.139176][ T8088] chnl_net:caif_netlink_parms(): no params data found [ 142.281370][ T8118] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 142.429924][ T50] bridge_slave_1: left allmulticast mode [ 142.435682][ T50] bridge_slave_1: left promiscuous mode [ 142.441387][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.621082][ T50] bridge_slave_0: left allmulticast mode [ 142.626902][ T50] bridge_slave_0: left promiscuous mode [ 142.632730][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.649618][ T8121] coredump: 21(syz.2.1088): written to core: VMAs: 31, size 91254784; core: 62104350 bytes, pos 91262976 [ 142.701819][ T8094] coredump: 70(syz.3.1082): written to core: VMAs: 31, size 89157632; core: 60011294 bytes, pos 89165824 [ 142.765522][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.780193][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.792195][ T50] bond0 (unregistering): Released all slaves [ 142.844887][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.852140][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.867784][ T8088] bridge_slave_0: entered allmulticast mode [ 142.883579][ T8088] bridge_slave_0: entered promiscuous mode [ 142.905838][ T50] hsr_slave_0: left promiscuous mode [ 142.920428][ T50] hsr_slave_1: left promiscuous mode [ 142.924188][ T8146] loop3: detected capacity change from 0 to 1024 [ 142.935638][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.943214][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.945939][ T8146] EXT4-fs: quotafile must be on filesystem root [ 142.959594][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.967191][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.987307][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.011286][ T50] veth1_macvtap: left promiscuous mode [ 143.017046][ T50] veth0_macvtap: left promiscuous mode [ 143.022656][ T50] veth1_vlan: left promiscuous mode [ 143.027939][ T50] veth0_vlan: left promiscuous mode [ 143.034398][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.055782][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.077850][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.168189][ T50] team0 (unregistering): Port device team_slave_1 removed [ 143.179321][ T50] team0 (unregistering): Port device team_slave_0 removed [ 143.223537][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.231047][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.238543][ T8088] bridge_slave_1: entered allmulticast mode [ 143.246314][ T8088] bridge_slave_1: entered promiscuous mode [ 143.265592][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.281729][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.325392][ T8088] team0: Port device team_slave_0 added [ 143.344624][ T8088] team0: Port device team_slave_1 added [ 143.384128][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.391204][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.418155][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.445499][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.452557][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.479493][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.566554][ T8088] hsr_slave_0: entered promiscuous mode [ 143.574735][ T8088] hsr_slave_1: entered promiscuous mode [ 143.581094][ T8088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.588732][ T8088] Cannot create hsr debugfs directory [ 143.640234][ T8191] loop4: detected capacity change from 0 to 512 [ 143.661848][ T8191] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 143.689233][ T8191] loop4: detected capacity change from 0 to 512 [ 143.710620][ T8191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.726773][ T8191] EXT4-fs (loop4): 1 truncate cleaned up [ 143.733968][ T8191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.823918][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.882957][ T8088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.907214][ T8218] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1106'. [ 143.910283][ T8088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.926812][ T8088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.938599][ T8088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.014152][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.036121][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.040295][ T8232] loop4: detected capacity change from 0 to 512 [ 144.050574][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.057759][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.069784][ T8232] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 144.080800][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.088178][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.103353][ T8232] loop4: detected capacity change from 0 to 512 [ 144.117415][ T8088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.121509][ T8232] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.149903][ T8232] EXT4-fs (loop4): 1 truncate cleaned up [ 144.159086][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.207720][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.227196][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.378945][ T8088] veth0_vlan: entered promiscuous mode [ 144.391518][ T8088] veth1_vlan: entered promiscuous mode [ 144.433656][ T8088] veth0_macvtap: entered promiscuous mode [ 144.439641][ T8276] loop4: detected capacity change from 0 to 512 [ 144.450311][ T8088] veth1_macvtap: entered promiscuous mode [ 144.456871][ T8276] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 144.484777][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.495460][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.505440][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.515983][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.526146][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.536636][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.547031][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.557557][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.567459][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.578031][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.588343][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.598899][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.608843][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.619471][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.632102][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.635563][ T8276] loop4: detected capacity change from 0 to 512 [ 144.640686][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.656495][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.666610][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.677869][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.688091][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.698901][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.709808][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.720963][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.732128][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.735178][ T8276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.742750][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.742771][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.776653][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.787383][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.799387][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.813637][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.824605][ T8276] EXT4-fs (loop4): 1 truncate cleaned up [ 144.838982][ T8088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.844182][ T8276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.847879][ T8088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.869344][ T8088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.878653][ T8088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.045053][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.101011][ T8313] 9pnet_fd: Insufficient options for proto=fd [ 145.117038][ T8315] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1120'. [ 145.299399][ T8343] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 145.516290][ T8355] 9pnet_fd: Insufficient options for proto=fd [ 145.877940][ T8348] coredump: 50(syz.2.1130): written to core: VMAs: 29, size 89026560; core: 59998894 bytes, pos 89034752 [ 146.259435][ T8384] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 146.649407][ T8387] coredump: 60(syz.2.1147): written to core: VMAs: 29, size 89026560; core: 59998894 bytes, pos 89034752 [ 146.977741][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 146.977761][ T29] audit: type=1326 audit(1727386388.258:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.008097][ T29] audit: type=1326 audit(1727386388.258:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.061056][ T29] audit: type=1326 audit(1727386388.258:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.085281][ T29] audit: type=1326 audit(1727386388.258:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.108947][ T29] audit: type=1326 audit(1727386388.258:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.132854][ T29] audit: type=1326 audit(1727386388.258:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.156310][ T29] audit: type=1326 audit(1727386388.258:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.180475][ T29] audit: type=1326 audit(1727386388.258:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.203922][ T29] audit: type=1326 audit(1727386388.258:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.227493][ T29] audit: type=1326 audit(1727386388.258:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365abdf39 code=0x7ffc0000 [ 147.284626][ T8415] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 147.762237][ T8446] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 147.776312][ T8420] coredump: 173(syz.4.1156): written to core: VMAs: 33, size 89288704; core: 60023694 bytes, pos 89296896 [ 148.357499][ T8480] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 148.456600][ T8488] loop4: detected capacity change from 0 to 512 [ 148.508106][ T8488] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 148.532002][ T8488] loop4: detected capacity change from 0 to 512 [ 148.551394][ T8488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.602727][ T8488] EXT4-fs (loop4): 1 truncate cleaned up [ 148.608896][ T8488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.734653][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.797978][ T8449] coredump: 69(syz.1.1168): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 149.325376][ T8485] coredump: 72(syz.2.1179): written to core: VMAs: 31, size 89157632; core: 60007198 bytes, pos 89165824 [ 149.686120][ T8524] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 149.761095][ T8537] loop4: detected capacity change from 0 to 512 [ 149.768437][ T8537] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 149.793312][ T8537] loop4: detected capacity change from 0 to 512 [ 149.814275][ T8537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.826658][ T8537] EXT4-fs (loop4): 1 truncate cleaned up [ 149.833069][ T8537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.952754][ T8547] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 149.962924][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.342794][ T8569] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 150.643153][ T8561] coredump: 104(syz.1.1202): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 150.681135][ T8581] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1211'. [ 150.859025][ T8531] coredump: 199(syz.4.1192): written to core: VMAs: 29, size 89026560; core: 59998894 bytes, pos 89034752 [ 151.483670][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.555189][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.571731][ T8573] coredump: 214(syz.4.1207): written to core: VMAs: 31, size 89157632; core: 60007198 bytes, pos 89165824 [ 151.670425][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.783930][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.923681][ T8635] loop4: detected capacity change from 0 to 512 [ 151.924614][ T8614] chnl_net:caif_netlink_parms(): no params data found [ 151.938517][ T8635] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 151.965971][ T50] bridge_slave_1: left allmulticast mode [ 151.969869][ T8635] loop4: detected capacity change from 0 to 512 [ 151.971736][ T50] bridge_slave_1: left promiscuous mode [ 151.979179][ T8635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.984703][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.036093][ T50] bridge_slave_0: left allmulticast mode [ 152.039502][ T8635] EXT4-fs (loop4): 1 truncate cleaned up [ 152.041872][ T50] bridge_slave_0: left promiscuous mode [ 152.042107][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.053667][ T8635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.226463][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.243431][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.263404][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.279768][ T50] bond0 (unregistering): Released all slaves [ 152.290624][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 152.290641][ T29] audit: type=1326 audit(1727386393.568:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.1234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f2061df39 code=0x0 [ 152.322260][ T29] audit: type=1326 audit(1727386393.588:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 152.345958][ T29] audit: type=1326 audit(1727386393.588:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 152.369415][ T29] audit: type=1326 audit(1727386393.588:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 152.393110][ T29] audit: type=1326 audit(1727386393.588:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 152.418316][ T29] audit: type=1326 audit(1727386393.588:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 152.442844][ T29] audit: type=1326 audit(1727386393.588:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0afabfdf39 code=0x7ffc0000 [ 152.466837][ T29] audit: type=1326 audit(1727386393.588:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0afabfdf73 code=0x7ffc0000 [ 152.487533][ T8674] loop4: detected capacity change from 0 to 512 [ 152.491346][ T29] audit: type=1326 audit(1727386393.588:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0afabfca1f code=0x7ffc0000 [ 152.520650][ T29] audit: type=1326 audit(1727386393.588:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0afabfdfc7 code=0x7ffc0000 [ 152.526338][ T8674] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 152.546730][ T8675] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 152.581320][ T8674] loop4: detected capacity change from 0 to 512 [ 152.588549][ T8674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.603468][ T8674] EXT4-fs (loop4): 1 truncate cleaned up [ 152.609655][ T8674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.632921][ T50] hsr_slave_0: left promiscuous mode [ 152.639232][ T50] hsr_slave_1: left promiscuous mode [ 152.646419][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.654620][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.663865][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.664403][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.671579][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.694469][ T50] veth1_macvtap: left promiscuous mode [ 152.700292][ T50] veth0_macvtap: left promiscuous mode [ 152.706066][ T50] veth1_vlan: left promiscuous mode [ 152.711437][ T50] veth0_vlan: left promiscuous mode [ 152.719346][ T8680] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 152.852913][ T50] team0 (unregistering): Port device team_slave_1 removed [ 152.867435][ T50] team0 (unregistering): Port device team_slave_0 removed [ 152.972580][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.979771][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.034039][ T8614] bridge_slave_0: entered allmulticast mode [ 153.060528][ T8614] bridge_slave_0: entered promiscuous mode [ 153.076374][ T8699] loop4: detected capacity change from 0 to 512 [ 153.090501][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.097708][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.121225][ T8699] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 153.132077][ T8614] bridge_slave_1: entered allmulticast mode [ 153.140113][ T8614] bridge_slave_1: entered promiscuous mode [ 153.174477][ T8699] loop4: detected capacity change from 0 to 512 [ 153.197028][ T8699] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.210385][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.229768][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.240262][ T8699] EXT4-fs (loop4): 1 truncate cleaned up [ 153.258219][ T8699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.282746][ T8614] team0: Port device team_slave_0 added [ 153.317408][ T8614] team0: Port device team_slave_1 added [ 153.378127][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.385166][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.411247][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.481525][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.488855][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.515071][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.546378][ T8740] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 153.564814][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.614357][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.736494][ T8614] hsr_slave_0: entered promiscuous mode [ 153.743971][ T8683] coredump: 239(syz.4.1238): written to core: VMAs: 29, size 89026560; core: 59998894 bytes, pos 89034752 [ 153.755778][ T8614] hsr_slave_1: entered promiscuous mode [ 153.764478][ T8614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.780224][ T8614] Cannot create hsr debugfs directory [ 153.792691][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.854834][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.918620][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 153.932983][ T8771] ------------[ cut here ]------------ [ 153.938522][ T8771] refcount_t: underflow; use-after-free. [ 153.944469][ T8771] WARNING: CPU: 0 PID: 8771 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 153.954035][ T8771] Modules linked in: [ 153.957944][ T8771] CPU: 0 UID: 0 PID: 8771 Comm: syz.4.1257 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 153.968560][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.978847][ T8771] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 153.985172][ T8771] Code: 72 ff ff ff e8 ab 7c 71 ff 48 c7 c7 3e e8 b2 86 e8 df 5f 8a ff c6 05 76 29 f4 04 01 90 48 c7 c7 de 8a 1b 86 e8 1b 37 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 7c 71 ff 48 c7 c7 3b e8 b2 86 e8 [ 154.005000][ T8771] RSP: 0018:ffffc9000162f468 EFLAGS: 00010246 [ 154.011241][ T8771] RAX: 77fe1bbc80dff100 RBX: ffff888114d1c4e4 RCX: 0000000000040000 [ 154.019236][ T8771] RDX: ffffc900021fa000 RSI: 0000000000004e38 RDI: 0000000000004e39 [ 154.027287][ T8771] RBP: 0000000000000003 R08: ffffffff8111f757 R09: 0000000000000000 [ 154.035485][ T8771] R10: 0001ffffffffffff R11: ffff8881031d6300 R12: ffff88811241a068 [ 154.043558][ T8771] R13: ffff88811241a000 R14: ffff888114d1c4e4 R15: 0000000000000000 [ 154.051801][ T8771] FS: 00007f93647316c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 154.062084][ T8771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.069860][ T8771] CR2: 000000110c2a5594 CR3: 000000010430e000 CR4: 00000000003506f0 [ 154.077918][ T8771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.086251][ T8771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.094434][ T8771] Call Trace: [ 154.097730][ T8771] [ 154.100856][ T8771] ? __warn+0x141/0x350 [ 154.105231][ T8771] ? report_bug+0x315/0x420 [ 154.109870][ T8771] ? refcount_warn_saturate+0x1c6/0x230 [ 154.115462][ T8771] ? handle_bug+0x60/0x90 [ 154.119893][ T8771] ? exc_invalid_op+0x1a/0x50 [ 154.124700][ T8771] ? asm_exc_invalid_op+0x1a/0x20 [ 154.130056][ T8771] ? __warn_printk+0x167/0x1b0 [ 154.135202][ T8771] ? refcount_warn_saturate+0x1c6/0x230 [ 154.140955][ T8771] ? refcount_warn_saturate+0x1c5/0x230 [ 154.146528][ T8771] sk_skb_reason_drop+0xe9/0x290 [ 154.151627][ T8771] j1939_session_put+0x157/0x2a0 [ 154.156767][ T8771] j1939_cancel_active_session+0x1d4/0x220 [ 154.162705][ T8771] j1939_netdev_notify+0x13a/0x1b0 [ 154.168518][ T8771] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 154.174296][ T8771] raw_notifier_call_chain+0x6f/0x1d0 [ 154.179977][ T8771] call_netdevice_notifiers_info+0xae/0x100 [ 154.186105][ T8771] dev_close_many+0x174/0x240 [ 154.191009][ T8771] unregister_netdevice_many_notify+0x263/0x11b0 [ 154.197466][ T8771] ? __list_add_valid_or_report+0x36/0xc0 [ 154.203267][ T8771] ? unregister_netdevice_queue+0x12b/0x220 [ 154.209996][ T8771] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 154.216881][ T8771] rtnl_dellink+0x380/0x580 [ 154.221423][ T8771] ? put_dec_trunc8+0x10e/0x130 [ 154.226417][ T8771] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 154.232691][ T8771] ? _raw_spin_unlock+0x26/0x50 [ 154.237635][ T8771] ? __mutex_lock+0x221/0x8e0 [ 154.242485][ T8771] ? __pfx_rtnl_dellink+0x10/0x10 [ 154.247558][ T8771] rtnetlink_rcv_msg+0x6aa/0x710 [ 154.252554][ T8771] ? __dev_queue_xmit+0x161/0x1fe0 [ 154.257796][ T8771] netlink_rcv_skb+0x12c/0x230 [ 154.262597][ T8771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.268260][ T8771] rtnetlink_rcv+0x1c/0x30 [ 154.273244][ T8771] netlink_unicast+0x599/0x670 [ 154.278185][ T8771] netlink_sendmsg+0x5cc/0x6e0 [ 154.282997][ T8771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.288316][ T8771] __sock_sendmsg+0x140/0x180 [ 154.293117][ T8771] ____sys_sendmsg+0x312/0x410 [ 154.298263][ T8771] __sys_sendmsg+0x1d9/0x270 [ 154.302922][ T8771] __x64_sys_sendmsg+0x46/0x50 [ 154.307937][ T8771] x64_sys_call+0x2689/0x2d60 [ 154.313130][ T8771] do_syscall_64+0xc9/0x1c0 [ 154.318489][ T8771] ? clear_bhb_loop+0x55/0xb0 [ 154.323602][ T8771] ? clear_bhb_loop+0x55/0xb0 [ 154.328348][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.334829][ T8771] RIP: 0033:0x7f9365abdf39 [ 154.339457][ T8771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.361245][ T8771] RSP: 002b:00007f9364731038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.369785][ T8771] RAX: ffffffffffffffda RBX: 00007f9365c75f80 RCX: 00007f9365abdf39 [ 154.378232][ T8771] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000000b [ 154.386469][ T8771] RBP: 00007f9365b30216 R08: 0000000000000000 R09: 0000000000000000 [ 154.394547][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.402565][ T8771] R13: 0000000000000000 R14: 00007f9365c75f80 R15: 00007ffef11a8238 [ 154.410639][ T8771] [ 154.413676][ T8771] ---[ end trace 0000000000000000 ]--- [ 154.419607][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 154.426210][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.434208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.442132][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.449959][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.457933][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.466224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.474210][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.482067][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.489918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.497961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.506052][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.513904][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.521812][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.529681][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.537690][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.545846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.554183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.562115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.570159][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.578579][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.586466][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.594406][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.602297][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.610140][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.618023][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.626236][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.634350][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.642621][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.650507][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.658438][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.666299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.674359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.683598][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.691703][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.699576][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.707563][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.715863][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.724530][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.732451][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.740316][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.748196][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.756056][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.763933][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.767340][ T8780] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 154.771779][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.771812][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.771827][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.771849][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.771871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.771893][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.827993][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.835897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.843837][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.851805][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.859675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.867660][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.875814][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.883875][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.891742][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.899839][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.908283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.917464][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.927174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.936366][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.946487][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.956188][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.966396][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.975529][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 154.983866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 154.991844][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.000866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.009365][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.018609][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.026507][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.034543][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.043026][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.051572][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.059870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.068025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.077936][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.085987][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.093882][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.101957][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.110440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.118349][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.126948][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.137186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.145576][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.154504][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.162544][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.170381][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.178444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.186315][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.194545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.202564][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.210749][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.218601][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.226567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.234822][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.243486][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.251440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.259379][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.267683][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.275559][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.284852][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.293447][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.301861][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.310335][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.318712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.327320][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 155.335447][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 155.409494][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.494952][ T8704] chnl_net:caif_netlink_parms(): no params data found [ 155.613367][ T50] bridge_slave_1: left allmulticast mode [ 155.613953][ T8746] coredump: 148(syz.2.1248): written to core: VMAs: 31, size 89157632; core: 60007198 bytes, pos 89165824 [ 155.619048][ T50] bridge_slave_1: left promiscuous mode [ 155.619155][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.687971][ T50] bridge_slave_0: left allmulticast mode [ 155.693753][ T50] bridge_slave_0: left promiscuous mode [ 155.699460][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.813590][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.824684][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.842978][ T50] bond0 (unregistering): Released all slaves [ 155.901179][ T50] hsr_slave_0: left promiscuous mode [ 155.915014][ T50] hsr_slave_1: left promiscuous mode [ 155.935634][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.943222][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.991336][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.998922][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.039998][ T50] veth1_macvtap: left promiscuous mode [ 156.045746][ T50] veth0_macvtap: left promiscuous mode [ 156.051390][ T50] veth1_vlan: left promiscuous mode [ 156.056683][ T50] veth0_vlan: left promiscuous mode [ 156.215331][ T50] team0 (unregistering): Port device team_slave_1 removed [ 156.229427][ T50] team0 (unregistering): Port device team_slave_0 removed [ 156.273679][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.281005][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.289922][ T8704] bridge_slave_0: entered allmulticast mode [ 156.297124][ T8704] bridge_slave_0: entered promiscuous mode [ 156.310973][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 156.319925][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.324566][ T8788] coredump: 149(syz.1.1260): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 156.327578][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.348816][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.356287][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.369880][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.377048][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.384900][ T8704] bridge_slave_1: entered allmulticast mode [ 156.391461][ T8704] bridge_slave_1: entered promiscuous mode [ 156.425659][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.445909][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.520365][ T8704] team0: Port device team_slave_0 added [ 156.537007][ T8704] team0: Port device team_slave_1 added [ 156.544039][ T8614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.563884][ T8614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.593339][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.600398][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.626739][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.638567][ T8614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.650096][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.657506][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.683685][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.698626][ T8614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.724896][ T8704] hsr_slave_0: entered promiscuous mode [ 156.738180][ T8704] hsr_slave_1: entered promiscuous mode [ 156.745931][ T8704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.754312][ T8704] Cannot create hsr debugfs directory [ 156.853311][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.887953][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.905716][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.912982][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.942648][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.949763][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.079633][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.104639][ T8910] FAULT_INJECTION: forcing a failure. [ 157.104639][ T8910] name failslab, interval 1, probability 0, space 0, times 1 [ 157.117829][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.1.1281 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 157.130638][ T8910] Tainted: [W]=WARN [ 157.135001][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.146288][ T8910] Call Trace: [ 157.149583][ T8910] [ 157.152531][ T8910] dump_stack_lvl+0xf2/0x150 [ 157.157376][ T8910] dump_stack+0x15/0x20 [ 157.161713][ T8910] should_fail_ex+0x223/0x230 [ 157.166581][ T8910] ? audit_log_d_path+0x96/0x250 [ 157.171593][ T8910] should_failslab+0x8f/0xb0 [ 157.176443][ T8910] __kmalloc_cache_noprof+0x4b/0x2a0 [ 157.181855][ T8910] audit_log_d_path+0x96/0x250 [ 157.186880][ T8910] ? get_file_rcu+0xeb/0x100 [ 157.191615][ T8910] ? __rcu_read_unlock+0x4e/0x70 [ 157.196712][ T8910] audit_log_d_path_exe+0x42/0x70 [ 157.201824][ T8910] audit_log_task+0x155/0x180 [ 157.206583][ T8910] audit_seccomp+0x68/0x130 [ 157.211195][ T8910] __seccomp_filter+0x6fa/0x1180 [ 157.216520][ T8910] ? proc_fail_nth_write+0x12a/0x150 [ 157.221877][ T8910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.227736][ T8910] ? vfs_write+0x580/0x910 [ 157.232220][ T8910] __secure_computing+0x9f/0x1c0 [ 157.237192][ T8910] syscall_trace_enter+0xd1/0x1f0 [ 157.242366][ T8910] do_syscall_64+0xaa/0x1c0 [ 157.246977][ T8910] ? clear_bhb_loop+0x55/0xb0 [ 157.251740][ T8910] ? clear_bhb_loop+0x55/0xb0 [ 157.256528][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.262677][ T8910] RIP: 0033:0x7f3f2061df39 [ 157.267201][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.286960][ T8910] RSP: 002b:00007f3f1f291038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 157.295491][ T8910] RAX: ffffffffffffffda RBX: 00007f3f207d5f80 RCX: 00007f3f2061df39 [ 157.303534][ T8910] RDX: 0000000000089101 RSI: 0000000020000000 RDI: ffffffffffffffff [ 157.311520][ T8910] RBP: 00007f3f1f291090 R08: 0000000000000000 R09: 0000000000000000 [ 157.319604][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.327605][ T8910] R13: 0000000000000000 R14: 00007f3f207d5f80 R15: 00007fff2a703e88 [ 157.335621][ T8910] [ 157.340587][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 157.340602][ T29] audit: type=1326 audit(1727386398.388:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.1.1281" exe="" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 157.374741][ T29] audit: type=1326 audit(1727386398.638:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.1.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3f2061c97c code=0x7ffc0000 [ 157.398540][ T29] audit: type=1326 audit(1727386398.638:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.1.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f2061ca1f code=0x7ffc0000 [ 157.422212][ T29] audit: type=1326 audit(1727386398.638:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.1.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3f2061cbca code=0x7ffc0000 [ 157.446321][ T29] audit: type=1326 audit(1727386398.638:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.1.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 157.470739][ T29] audit: type=1326 audit(1727386398.638:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.1.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 157.556808][ T8704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.571441][ T8704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.587556][ T8704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.599706][ T8704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.608796][ T29] audit: type=1326 audit(1727386398.888:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 157.632415][ T29] audit: type=1326 audit(1727386398.888:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 157.656124][ T29] audit: type=1326 audit(1727386398.888:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 157.679619][ T29] audit: type=1326 audit(1727386398.888:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 157.712906][ T8614] veth0_vlan: entered promiscuous mode [ 157.722033][ T8614] veth1_vlan: entered promiscuous mode [ 157.732373][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.760125][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.774457][ T8614] veth0_macvtap: entered promiscuous mode [ 157.785705][ T8614] veth1_macvtap: entered promiscuous mode [ 157.804484][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.811595][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.831451][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.841992][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.851953][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.862452][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.872466][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.882934][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.892793][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.903250][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.913139][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.923879][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.947188][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.961439][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.968649][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.996003][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.006597][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.016838][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.027335][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.037376][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.048355][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.059791][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.070464][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.080695][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.091368][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.119314][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.141466][ T8614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.150339][ T8614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.159129][ T8614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.168062][ T8614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.224149][ T8704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.234983][ T8704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.367162][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.428555][ T8988] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 158.587066][ T8704] veth0_vlan: entered promiscuous mode [ 158.625766][ T8704] veth1_vlan: entered promiscuous mode [ 158.676103][ T8704] veth0_macvtap: entered promiscuous mode [ 158.695702][ T8704] veth1_macvtap: entered promiscuous mode [ 158.726601][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.737325][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.747279][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.758233][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.768372][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.778860][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.789157][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.800123][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.810006][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.820537][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.830521][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.841054][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.925537][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.947382][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.958121][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.968424][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.979083][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.989121][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.999763][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.009702][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.020172][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.030171][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.040662][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.051748][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.062993][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.113550][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.142179][ T8704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.152034][ T8704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.160856][ T8704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.169629][ T8704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.917382][ T9117] syz.2.1306 uses obsolete (PF_INET,SOCK_PACKET) [ 160.300913][ T9142] FAULT_INJECTION: forcing a failure. [ 160.300913][ T9142] name failslab, interval 1, probability 0, space 0, times 0 [ 160.314584][ T9142] CPU: 0 UID: 0 PID: 9142 Comm: syz.2.1311 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 160.326419][ T9142] Tainted: [W]=WARN [ 160.330267][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.340872][ T9142] Call Trace: [ 160.344180][ T9142] [ 160.347125][ T9142] dump_stack_lvl+0xf2/0x150 [ 160.351805][ T9142] dump_stack+0x15/0x20 [ 160.356054][ T9142] should_fail_ex+0x223/0x230 [ 160.360856][ T9142] ? selinux_bpf_prog_load+0x35/0xe0 [ 160.366177][ T9142] should_failslab+0x8f/0xb0 [ 160.370977][ T9142] __kmalloc_cache_noprof+0x4b/0x2a0 [ 160.376457][ T9142] ? should_fail+0xb/0x10 [ 160.380820][ T9142] selinux_bpf_prog_load+0x35/0xe0 [ 160.386049][ T9142] security_bpf_prog_load+0x47/0x80 [ 160.391325][ T9142] bpf_prog_load+0xe81/0x1070 [ 160.396522][ T9142] ? __rcu_read_unlock+0x4e/0x70 [ 160.401488][ T9142] __sys_bpf+0x463/0x7a0 [ 160.405754][ T9142] __x64_sys_bpf+0x43/0x50 [ 160.410321][ T9142] x64_sys_call+0x2625/0x2d60 [ 160.415338][ T9142] do_syscall_64+0xc9/0x1c0 [ 160.420154][ T9142] ? clear_bhb_loop+0x55/0xb0 [ 160.424940][ T9142] ? clear_bhb_loop+0x55/0xb0 [ 160.429677][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.435605][ T9142] RIP: 0033:0x7f0afabfdf39 [ 160.440116][ T9142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.459967][ T9142] RSP: 002b:00007f0af9871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.468413][ T9142] RAX: ffffffffffffffda RBX: 00007f0afadb5f80 RCX: 00007f0afabfdf39 [ 160.476650][ T9142] RDX: 0000000000000090 RSI: 00000000200002c0 RDI: 0000000000000005 [ 160.484935][ T9142] RBP: 00007f0af9871090 R08: 0000000000000000 R09: 0000000000000000 [ 160.493110][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.501396][ T9142] R13: 0000000000000000 R14: 00007f0afadb5f80 R15: 00007ffced2791a8 [ 160.509638][ T9142] [ 160.822676][ T8997] coredump: 215(syz.2.1293): written to core: VMAs: 31, size 89157632; core: 60007198 bytes, pos 89165824 [ 161.089414][ T9161] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 162.145019][ T9210] 9pnet_fd: Insufficient options for proto=fd [ 162.614622][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 162.614641][ T29] audit: type=1326 audit(1727386403.898:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.646625][ T29] audit: type=1326 audit(1727386403.898:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.670301][ T29] audit: type=1326 audit(1727386403.898:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.674467][ T9229] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 162.694822][ T29] audit: type=1326 audit(1727386403.898:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.727978][ T29] audit: type=1326 audit(1727386403.898:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.753258][ T29] audit: type=1326 audit(1727386403.898:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.776744][ T29] audit: type=1326 audit(1727386403.898:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.800404][ T29] audit: type=1326 audit(1727386403.898:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.824580][ T29] audit: type=1326 audit(1727386403.898:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.830131][ T9234] GUP no longer grows the stack in syz.1.1342 (9234): 20004000-20008000 (20002000) [ 162.848294][ T29] audit: type=1326 audit(1727386403.898:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5adfbdf39 code=0x7ffc0000 [ 162.857638][ T9234] CPU: 0 UID: 0 PID: 9234 Comm: syz.1.1342 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 162.892909][ T9234] Tainted: [W]=WARN [ 162.896805][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.906869][ T9234] Call Trace: [ 162.910317][ T9234] [ 162.913262][ T9234] dump_stack_lvl+0xf2/0x150 [ 162.917960][ T9234] dump_stack+0x15/0x20 [ 162.922341][ T9234] __get_user_pages+0x209b/0x2670 [ 162.927397][ T9234] ? __rcu_read_unlock+0x4e/0x70 [ 162.932362][ T9234] get_user_pages_remote+0x1df/0x790 [ 162.937727][ T9234] __access_remote_vm+0x15b/0x580 [ 162.942789][ T9234] access_remote_vm+0x34/0x50 [ 162.947531][ T9234] proc_pid_cmdline_read+0x3e6/0x660 [ 162.952925][ T9234] vfs_readv+0x3e2/0x660 [ 162.957274][ T9234] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 162.963108][ T9234] __x64_sys_preadv+0x100/0x1c0 [ 162.968125][ T9234] x64_sys_call+0x1d5c/0x2d60 [ 162.972835][ T9234] do_syscall_64+0xc9/0x1c0 [ 162.977432][ T9234] ? clear_bhb_loop+0x55/0xb0 [ 162.982147][ T9234] ? clear_bhb_loop+0x55/0xb0 [ 162.986995][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.993000][ T9234] RIP: 0033:0x7f3f2061df39 [ 162.997535][ T9234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.017586][ T9234] RSP: 002b:00007f3f1f291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 163.026292][ T9234] RAX: ffffffffffffffda RBX: 00007f3f207d5f80 RCX: 00007f3f2061df39 [ 163.034359][ T9234] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000009 [ 163.042527][ T9234] RBP: 00007f3f20690216 R08: 0000000000000000 R09: 0000000000000000 [ 163.050524][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.058639][ T9234] R13: 0000000000000000 R14: 00007f3f207d5f80 R15: 00007fff2a703e88 [ 163.066735][ T9234] [ 163.120453][ T9240] 9pnet_fd: Insufficient options for proto=fd [ 163.213148][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 163.222558][ T9249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.230663][ T9249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.251615][ T9249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.259196][ T9249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.003892][ T9281] 9pnet_fd: Insufficient options for proto=fd [ 164.109912][ T9274] chnl_net:caif_netlink_parms(): no params data found [ 164.180108][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.187725][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.195540][ T9311] FAULT_INJECTION: forcing a failure. [ 164.195540][ T9311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.202091][ T9274] bridge_slave_0: entered allmulticast mode [ 164.208815][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.1.1366 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 164.225234][ T9274] bridge_slave_0: entered promiscuous mode [ 164.227427][ T9311] Tainted: [W]=WARN [ 164.227438][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.247770][ T9311] Call Trace: [ 164.251681][ T9311] [ 164.254808][ T9311] dump_stack_lvl+0xf2/0x150 [ 164.259450][ T9311] dump_stack+0x15/0x20 [ 164.263765][ T9311] should_fail_ex+0x223/0x230 [ 164.268589][ T9311] should_fail+0xb/0x10 [ 164.272916][ T9311] should_fail_usercopy+0x1a/0x20 [ 164.277994][ T9311] _copy_from_user+0x1e/0xd0 [ 164.282676][ T9311] __sys_bpf+0x14e/0x7a0 [ 164.287100][ T9311] __x64_sys_bpf+0x43/0x50 [ 164.291721][ T9311] x64_sys_call+0x2625/0x2d60 [ 164.296513][ T9311] do_syscall_64+0xc9/0x1c0 [ 164.301053][ T9311] ? clear_bhb_loop+0x55/0xb0 [ 164.306051][ T9311] ? clear_bhb_loop+0x55/0xb0 [ 164.310754][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.317154][ T9311] RIP: 0033:0x7f3f2061df39 [ 164.321609][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.341478][ T9311] RSP: 002b:00007f3f1f291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.350126][ T9311] RAX: ffffffffffffffda RBX: 00007f3f207d5f80 RCX: 00007f3f2061df39 [ 164.358124][ T9311] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 164.366280][ T9311] RBP: 00007f3f1f291090 R08: 0000000000000000 R09: 0000000000000000 [ 164.374333][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.382881][ T9311] R13: 0000000000000000 R14: 00007f3f207d5f80 R15: 00007fff2a703e88 [ 164.391060][ T9311] [ 164.396664][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.404027][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.411773][ T9274] bridge_slave_1: entered allmulticast mode [ 164.418594][ T9274] bridge_slave_1: entered promiscuous mode [ 164.473402][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.485029][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.562251][ T9274] team0: Port device team_slave_0 added [ 164.581643][ T9274] team0: Port device team_slave_1 added [ 164.670927][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 164.732527][ T9329] batadv0: entered promiscuous mode [ 164.747726][ T9329] macvtap1: entered promiscuous mode [ 164.753286][ T9329] macvtap1: entered allmulticast mode [ 164.758687][ T9329] batadv0: entered allmulticast mode [ 164.793093][ T9329] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 164.829563][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.836616][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.862775][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.910026][ T9330] batadv0: left allmulticast mode [ 164.915391][ T9330] batadv0: left promiscuous mode [ 164.947839][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.954932][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.981491][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.069153][ T9274] hsr_slave_0: entered promiscuous mode [ 165.085429][ T9274] hsr_slave_1: entered promiscuous mode [ 165.110765][ T9274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.128677][ T9274] Cannot create hsr debugfs directory [ 165.334473][ T9274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.404530][ T9323] coredump: 276(syz.2.1372): written to core: VMAs: 29, size 89026560; core: 60002990 bytes, pos 89034752 [ 165.418834][ T9274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.459264][ T9358] Illegal XDP return value 4294967274 on prog (id 1032) dev N/A, expect packet loss! [ 165.484418][ T9274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.534750][ T9274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.607326][ T9297] coredump: 214(syz.1.1362): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 165.613586][ T9274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.664030][ T9274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.679399][ T9274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.703750][ T9274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.799187][ T9274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.851295][ T9274] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.863380][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.870512][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.924076][ T9378] mmap: +}[@ (9378) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.942006][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.949101][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.131535][ T9274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.426582][ T9274] veth0_vlan: entered promiscuous mode [ 166.436287][ T9274] veth1_vlan: entered promiscuous mode [ 166.501387][ T9274] veth0_macvtap: entered promiscuous mode [ 166.516150][ T9411] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 166.526807][ T9274] veth1_macvtap: entered promiscuous mode [ 166.554944][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.566328][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.576578][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.587139][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.597708][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.608364][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.620855][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.631666][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.643403][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.654416][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.664549][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.675566][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.702189][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.741239][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.752141][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.762042][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.772663][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.782665][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.793176][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.803276][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.813778][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.823743][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.834258][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.844487][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.855012][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.866205][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.875064][ T9274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.883885][ T9274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.892741][ T9274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.901498][ T9274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.169893][ T9436] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1403'. [ 167.535421][ T9460] 9pnet_fd: Insufficient options for proto=fd [ 167.703676][ T9368] coredump: 288(syz.2.1384): written to core: VMAs: 29, size 89026560; core: 60002990 bytes, pos 89034752 [ 167.722480][ T9469] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 167.765515][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 167.765530][ T29] audit: type=1326 audit(1727386409.048:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.1416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x0 [ 167.837716][ T29] audit: type=1326 audit(1727386409.088:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 167.861389][ T29] audit: type=1326 audit(1727386409.088:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 167.884975][ T29] audit: type=1326 audit(1727386409.098:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 167.908759][ T29] audit: type=1326 audit(1727386409.098:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 167.914907][ T9427] coredump: 131(syz.0.1400): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 167.932715][ T29] audit: type=1326 audit(1727386409.098:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 167.968748][ T29] audit: type=1326 audit(1727386409.098:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 167.993115][ T29] audit: type=1326 audit(1727386409.098:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 168.016972][ T29] audit: type=1326 audit(1727386409.098:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 168.041199][ T29] audit: type=1326 audit(1727386409.098:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 168.088122][ T9481] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1419'. [ 168.137176][ T9355] coredump: 240(syz.1.1380): written to core: VMAs: 31, size 85225472; core: 56132382 bytes, pos 85233664 [ 168.644126][ T9500] 9pnet_fd: Insufficient options for proto=fd [ 168.864082][ T9512] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1432'. [ 169.112451][ T9522] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 169.158703][ T9538] 9pnet_fd: Insufficient options for proto=fd [ 169.453303][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.488799][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.497932][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.522469][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.558469][ T9417] coredump: 303(syz.2.1396): written to core: VMAs: 31, size 89157632; core: 60011294 bytes, pos 89165824 [ 170.190144][ T9443] coredump: 258(syz.1.1405): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 170.220214][ T9479] coredump: 27(syz.4.1418): written to core: VMAs: 28, size 88952832; core: 59998838 bytes, pos 88961024 [ 170.293192][ T9476] coredump: 266(syz.1.1416): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 170.542694][ T9586] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1462'. [ 170.625876][ T9539] coredump: 321(syz.2.1436): written to core: VMAs: 31, size 89157632; core: 60011294 bytes, pos 89165824 [ 172.612633][ T9639] chnl_net:caif_netlink_parms(): no params data found [ 172.650220][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.658405][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.668620][ T9639] bridge_slave_0: entered allmulticast mode [ 172.675323][ T9639] bridge_slave_0: entered promiscuous mode [ 172.684658][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.692263][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.700068][ T9639] bridge_slave_1: entered allmulticast mode [ 172.707550][ T9639] bridge_slave_1: entered promiscuous mode [ 172.729717][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.741096][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.763064][ T9639] team0: Port device team_slave_0 added [ 172.769994][ T9639] team0: Port device team_slave_1 added [ 172.788967][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.796094][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.822266][ T9639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.834802][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.841842][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.868058][ T9639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.896851][ T9639] hsr_slave_0: entered promiscuous mode [ 172.903189][ T9639] hsr_slave_1: entered promiscuous mode [ 172.909303][ T9639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.916975][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 172.916990][ T29] audit: type=1326 audit(1727386414.198:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x0 [ 172.917191][ T9639] Cannot create hsr debugfs directory [ 172.969523][ T29] audit: type=1326 audit(1727386414.248:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 172.993821][ T29] audit: type=1326 audit(1727386414.268:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 173.041218][ T29] audit: type=1326 audit(1727386414.278:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 173.065172][ T29] audit: type=1326 audit(1727386414.278:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 173.089138][ T29] audit: type=1326 audit(1727386414.278:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2061df39 code=0x7ffc0000 [ 173.149089][ T9639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.215602][ T9639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.227713][ T29] audit: type=1326 audit(1727386414.518:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.4.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 173.251282][ T29] audit: type=1326 audit(1727386414.518:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.4.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 173.277192][ T29] audit: type=1326 audit(1727386414.558:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.4.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94bee1c8d0 code=0x7ffc0000 [ 173.307282][ T29] audit: type=1326 audit(1727386414.588:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.4.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bee1df39 code=0x7ffc0000 [ 173.356512][ T9639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.424282][ T9639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.497956][ T9639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.514853][ T9639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.524261][ T9639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.534254][ T9639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.551728][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.558950][ T9639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.565761][ T9665] coredump: 339(syz.1.1487): written to core: VMAs: 29, size 91123712; core: 62104238 bytes, pos 91131904 [ 173.566440][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.584747][ T9639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.611783][ T3369] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.619915][ T3369] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.645863][ T9639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.659049][ T9639] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.669415][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.676640][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.688412][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.695629][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.784155][ T9639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.868402][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.876105][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.878315][ T9639] veth0_vlan: entered promiscuous mode [ 173.883548][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 173.895858][ T9639] veth1_vlan: entered promiscuous mode [ 173.896501][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.912203][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.919730][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.922760][ T9639] veth0_macvtap: entered promiscuous mode [ 173.927363][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.938540][ T9639] veth1_macvtap: entered promiscuous mode [ 173.940877][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.954170][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.956633][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.961611][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.972230][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.979600][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.989427][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.996837][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.007432][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.015088][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.025082][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.025103][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.025120][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.025137][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.025159][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.025211][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.025232][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.025249][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.025265][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.025281][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.032690][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.057503][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.063767][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.063830][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.084735][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.094251][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.105385][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.105399][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.115365][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.126079][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.126100][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.136175][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.137357][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.143642][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.143664][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.143683][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.151337][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.158588][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.166345][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.176808][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.184246][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.194114][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.204543][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.212250][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.222260][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.232832][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.232851][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.237604][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.240242][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.259886][ T9639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.268229][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.278115][ T9639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.285517][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.295970][ T9639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.303371][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.313255][ T9639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.320539][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.457247][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.464679][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.472429][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.479952][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.489310][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 174.779221][ T9736] FAULT_INJECTION: forcing a failure. [ 174.779221][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 174.792540][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.3.1512 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 174.804442][ T9736] Tainted: [W]=WARN [ 174.808300][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.818522][ T9736] Call Trace: [ 174.821864][ T9736] [ 174.824886][ T9736] dump_stack_lvl+0xf2/0x150 [ 174.829536][ T9736] dump_stack+0x15/0x20 [ 174.833725][ T9736] should_fail_ex+0x223/0x230 [ 174.838485][ T9736] ? vm_area_alloc+0x2c/0x130 [ 174.843261][ T9736] should_failslab+0x8f/0xb0 [ 174.847858][ T9736] kmem_cache_alloc_noprof+0x4c/0x290 [ 174.853264][ T9736] vm_area_alloc+0x2c/0x130 [ 174.857839][ T9736] mmap_region+0x938/0x16e0 [ 174.862445][ T9736] do_mmap+0x718/0xb60 [ 174.866543][ T9736] vm_mmap_pgoff+0x133/0x290 [ 174.871187][ T9736] ksys_mmap_pgoff+0xd0/0x330 [ 174.875977][ T9736] ? fpregs_assert_state_consistent+0x83/0xa0 [ 174.882257][ T9736] x64_sys_call+0x1884/0x2d60 [ 174.887077][ T9736] do_syscall_64+0xc9/0x1c0 [ 174.891632][ T9736] ? clear_bhb_loop+0x55/0xb0 [ 174.896374][ T9736] ? clear_bhb_loop+0x55/0xb0 [ 174.901085][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.907010][ T9736] RIP: 0033:0x7f007ab0df73 [ 174.911453][ T9736] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 174.932132][ T9736] RSP: 002b:00007f0079786e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.940681][ T9736] RAX: ffffffffffffffda RBX: 00000000000004b2 RCX: 00007f007ab0df73 [ 174.948703][ T9736] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 174.956716][ T9736] RBP: 0000000020000c82 R08: 00000000ffffffff R09: 0000000000000000 [ 174.964718][ T9736] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 174.973027][ T9736] R13: 00007f0079786ef0 R14: 00007f0079786eb0 R15: 00000000200000c0 [ 174.981379][ T9736] [ 176.817926][ T9789] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1532'. [ 177.047800][ T9814] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1543'. [ 177.060688][ T9813] loop4: detected capacity change from 0 to 512 [ 177.075567][ T9813] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 177.101038][ T8636] ================================================================== [ 177.109221][ T8636] BUG: KCSAN: data-race in generic_fillattr / shmem_mknod [ 177.116464][ T8636] [ 177.118861][ T8636] write to 0xffff888103ed29a4 of 4 bytes by task 7347 on cpu 1: [ 177.126858][ T8636] shmem_mknod+0x136/0x180 [ 177.131301][ T8636] shmem_create+0x34/0x40 [ 177.135654][ T8636] path_openat+0xe92/0x1fa0 [ 177.140197][ T8636] do_filp_open+0xf7/0x200 [ 177.144639][ T8636] do_sys_openat2+0xab/0x120 [ 177.149262][ T8636] __x64_sys_openat+0xf3/0x120 [ 177.152249][ T9824] loop4: detected capacity change from 0 to 512 [ 177.154043][ T8636] x64_sys_call+0x1025/0x2d60 [ 177.154078][ T8636] do_syscall_64+0xc9/0x1c0 [ 177.154112][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.154142][ T8636] [ 177.154150][ T8636] read to 0xffff888103ed29a4 of 4 bytes by task 8636 on cpu 0: [ 177.185375][ T8636] generic_fillattr+0x1a6/0x2f0 [ 177.186775][ T9824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.190333][ T8636] shmem_getattr+0x17b/0x200 [ 177.190360][ T8636] vfs_getattr+0x19b/0x1e0 [ 177.209835][ T8636] vfs_statx+0x134/0x2f0 [ 177.214193][ T8636] vfs_fstatat+0xec/0x110 [ 177.218636][ T8636] __se_sys_newfstatat+0x58/0x260 [ 177.223696][ T8636] __x64_sys_newfstatat+0x55/0x70 [ 177.228764][ T8636] x64_sys_call+0x141f/0x2d60 [ 177.233603][ T8636] do_syscall_64+0xc9/0x1c0 [ 177.238151][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.244459][ T8636] [ 177.246813][ T8636] value changed: 0x168e8ae3 -> 0x17272163 [ 177.252642][ T8636] [ 177.254980][ T8636] Reported by Kernel Concurrency Sanitizer on: [ 177.261243][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: udevd Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 177.272760][ T8636] Tainted: [W]=WARN [ 177.276589][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.287041][ T8636] ================================================================== [ 177.310939][ T9824] EXT4-fs (loop4): 1 truncate cleaned up [ 177.317199][ T9824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.426607][ T9274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.690964][ T9798] coredump: 402(syz.1.1535): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 177.773262][ T9825] coredump: 30(syz.3.1547): written to core: VMAs: 28, size 88952832; core: 59994742 bytes, pos 88961024